Files
next-ai-draw-io/app/api/verify-access-code/route.ts
T
dayuan.jiang 528b6e54c8 fix(api): require access codes and limit sizes on helper routes
- Shared checkAccessCode for validate-diagram, validate-model, parse-url, verify-access-code
- parse-url: 5 MB streamed body limit; validate-diagram: 5 MB image limit
- validate-model refuses redirects when private URLs are blocked
- Admin settings state shared across module instances via globalThis
- Server model ids: unique slugs (non-ASCII names encoded), duplicates rejected
- Panel Bedrock credentials stored as ADMIN_AWS_* so the DynamoDB client keeps its own
- Locale redirect keeps basePath and query; EdgeOne function drops open CORS and checks the access code
- Providers payload reports whether .env sets a default model
2026-10-03 17:45:41 +09:00

13 lines
354 B
TypeScript

import { checkAccessCode } from "@/lib/access-code"
export async function POST(req: Request) {
if (checkAccessCode(req)) {
return Response.json(
{ valid: false, message: "Invalid or missing access code" },
{ status: 401 },
)
}
return Response.json({ valid: true, message: "Access code is valid" })
}